Propose Security Hardening — Agent Skill by OpenAI

From the author

Develop evidence-backed structural and architectural security hardening proposals from vulnerability disclosures, supplied findings, incident or assessment documents, source code, or a completed Codex Security scan. Use when a user asks for systemic improvements, alternatives beyond per-finding patches, before-and-after security architecture views, engineering tradeoff analysis, or an implementation-ready plan for a selected hardening option. Also use automatically after a Codex Security scan with reportable findings when the top-level scan workflow requests final-report hardening guidance.

— the description by OpenAI

Install

Get the skill from its source (we cannot redistribute it):
https://github.com/openai/plugins/tree/d420d13051bffe4543ed39e30fa46b87148e47dd/plugins/codex-security/skills/propose-security-hardening

Documentation by OpenAI

The licence of this skill does not allow us to copy its documentation. Read it at the source

Files

SKILL.md(opens on GitHub)Not mirrored: opens on GitHub22.3 KiB
agents/openai.yaml(opens on GitHub)Not mirrored: opens on GitHub293 B
references/proposal-format.md(opens on GitHub)Not mirrored: opens on GitHub25.3 KiB

Requirements and compatibility

Written for: OpenAI Codex

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Security And Hardening
Addy Osmani· Community
A comprehensive framework for building secure, hardened web applications through threat modeling and defensive coding practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository113.9k
Claude Security
AnthropicOfficial
Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
Link-onlyGitHub stars of the source repository46.3k
Mtls Configuration
Seth Hobson· Community
A comprehensive guide and template library for implementing mutual TLS (mTLS) to secure service-to-service communication in zero-trust environments.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Secrets Management
Seth Hobson· Community
A guide to implementing secure secrets management in CI/CD pipelines using industry-standard tools and best practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
K8s Security Policies
Seth Hobson· Community
A comprehensive guide for implementing production-grade security policies in Kubernetes clusters.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Jfrog Sec
GitHubOfficial
A specialized DevSecOps agent for automated security remediation using JFrog intelligence.
SecurityGitHub Copilot
MITGitHub stars of the source repository40.9k